February 1-2, 2025
February 1-2, 2025
Today, I'm releasing the first version of a small web 🚀: https://t.co/WZMsLWpGEK
— Johannes Bader (@viql) January 30, 2025
It provides IOCs and YARA rules collected semi-automatically from public blog posts and reports of almost 200 cybersecurity sites.
I hope it proves useful to some of you ... 🙏✨ #ThreatIntel pic.twitter.com/Xe75VxDruj
uscope: A New Debugger and Introspection Toolchain
https://calabro.io/uscopejcalabro/uscope: μscope 🔬
GitHub - jcalabro/uscope: μscope 🔬
μscope 🔬. Contribute to jcalabro/uscope development by creating an account on GitHub.
EarlyCascade : A PoC for Early Cascade process injection technique : https://t.co/smv6dlfXer credits @0xNinjaCyclone
— Binni Shah (@binitamshah) February 1, 2025
Details :
Introducting Early Cascade Injection : https://t.co/p2sXSkHyCE pic.twitter.com/duype1HiJ3
Russian spy ship fire exposes poor state of Mediterranean fleet, say expertshttps://t.co/FZNDBU6GTT
— Dr. Dan Lomas (@Sandbagger_01) February 1, 2025
🦀 Check out this collection of blog posts that cover Rust RE, CTF writeups and more. There's a lot good stuff in here @cxiao__, appreciate the work!https://t.co/z9G2zjRPlp
— Hex-Rays SA (@HexRaysSA) January 31, 2025
Presenting his new book on Russian intel history, Nikolay Dolgopolov tells of his "writing" sessions with a 100-year-old Cheka veteran Boris Gudz who claimed that Grishka [Grigory Syroyezhkin] "bumped off" Sidney Reilly in the Sokolniki Park in Moscow. ⬇️https://t.co/nNBbrVi3f7
— Filip Kovacevic (@ChekistMonitor) February 1, 2025
On Dolgopolov's writings in general, see my article "Nikolay Dolgopolov: The Storyteller of Soviet Intelligence History" published in Intelligence and National Security journal in 2020. https://t.co/hkMJGwvsTs
— Filip Kovacevic (@ChekistMonitor) February 1, 2025
New Blog Post:https://t.co/RXemRXnoNs
— Mickey Jin (@patch1t) January 31, 2025
Tell you more about what I didn’t talk about at the #OBTS 7 @objective_see
#SpyNews - week 5 (January 26-February 1):
— Spy Collection (@SpyCollection1) February 2, 2025
A summary of 91 espionage-related stories from week 5 coming from 🇬🇧🇨🇳🇺🇸🇲🇽🇦🇫🇩🇪🇺🇦🇷🇺🇵🇱🇨🇿🇧🇾🇮🇱🇸🇪🇱🇻🇮🇪🇹🇷🇵🇭🇫🇷🇹🇼🇮🇷🇦🇿🇧🇪🇪🇪🇰🇷🇸🇦🇧🇬🇦🇲🇨🇦🇳🇱🇷🇴🇬🇪🇸🇾🇿🇦🇦🇹🇨🇭🇧🇷🇮🇹🇨🇱🇪🇬🇶🇦🇳🇴🇹🇭🇯🇵🇵🇰🇧🇩🇮🇳🇹🇹🇨🇩🇷🇼 https://t.co/pjDWm1m4mf#OSINT #HUMINT #SIGINT #spy #espionage
Fake Game Hacks on YouTube Target Kids with Malware
— Gray Hats (@the_yellow_fall) February 2, 2025
Beware of fake game hacks! McAfee Labs warns about malware spread through YouTube videos offering cheats for popular games like #Minecraft, #Roblox, and #Fortnite.https://t.co/NpPhxYSR5Z
💡"The Normie guide to ordering highly illegal drugs on the Dark Internet in 2025"
— Dark Web Informer - Cyber Threat Intelligence (@DarkWebInformer) February 2, 2025
Probably what happens to a lot of people to be honest. 😁
Link: http://dreadytofatroptsdj6io7l3xptbet6onoyno2yv7jicoxknyazubrad[.]onion/post/a6512fb501eaf85d29e1 pic.twitter.com/uy0dISwTTA
CVE PoCs: Demonstrations for CVEs with detailed explanations and exploitation techniques. https://t.co/4eXjN7Bk1y
— Nicolas Krassas (@Dinosn) February 2, 2025
ReSym: Harnessing LLMs to Recover Variable and Data Structure Symbols from Stripped Binarieshttps://t.co/dYzepTTJ6U pic.twitter.com/x3pdqNO1U7
— Alex Plaskett (@alexjplaskett) February 2, 2025

HISAC - High Impact Security Analysis and Communication : Jai Minton
How to be a well rounded SOC/MDR/Cyber/Information Security Analyst.
I frequently get asked is "what skills do I need need to excel as an analyst", so I figure this is a good opportunity to shed some light on what analysis is, and why certifications alone won't make you a good analyst.https://t.co/EZf9MDdROX
— Jai Minton (@CyberRaiju) February 2, 2025
Why Canada's spies worry about Trump's national intelligence nominee https://t.co/1PsFAYwvIA
— Dr. Dan Lomas (@Sandbagger_01) February 2, 2025
Chained two 'meh' WordPress vulnerabilities into a high-impact exploit on JupiterX Core 👾. From low-privilege SVG upload to full RCE, check out the full breakdown and PoC 🛠️#BugBounty #bugbountytips #WordPress #Cybersecurityhttps://t.co/q0WJiO2IY2
— Mat Rollings (@stealthcopter) February 1, 2025

Jailbreaking Generative AI - API Security
DeepSeek, a disruptive new AI model from China, has shaken the market, sparking both excitement and controversy. While it has gained attention for its
Everyone knows your location: tracking myself down through in-app ads https://t.co/R0UeVrayOj
— Nicolas Krassas (@Dinosn) February 1, 2025

Everyone knows your location
How I tracked myself down using leaked location data in the in-app ads, and what I found along the way.
The bug @patch1t mentioned at the end of his blogpost (the one he couldn't share at OBTS) took Apple fixing 5 years!!
— Csaba Fitzl (@theevilbit) February 1, 2025
Look at the end of my blogpost from 2019:https://t.co/5qUXEWIaNJ
I kept reporting it for a few major versions and I eventually gave up at 15.0... https://t.co/5vIQm6UFme pic.twitter.com/wwIKrmTfxT
Last week we exploited a Race Condition in the Windows 7 (x86) Kernel. Now we pivot back into a more modern OS: Windows 11 (x64)!https://t.co/xOBbP7lnN7
— wetw0rk (@wetw0rk_bot) February 1, 2025